Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: unknown

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.97.224.88 attack
Automatic report - Port Scan Attack
2020-10-01 08:47:47
138.97.224.88 attackspam
Automatic report - Port Scan Attack
2020-10-01 01:23:20
138.97.224.88 attackbotsspam
Automatic report - Port Scan Attack
2020-09-30 17:35:18
138.97.22.186 attackspambots
SSH/22 MH Probe, BF, Hack -
2020-09-30 02:59:46
138.97.22.186 attack
SSH/22 MH Probe, BF, Hack -
2020-09-29 19:02:11
138.97.241.37 attackbots
Sep 26 16:13:02 server sshd[18441]: Failed password for invalid user openvpn from 138.97.241.37 port 42432 ssh2
Sep 26 16:16:43 server sshd[19383]: Failed password for invalid user dmdba from 138.97.241.37 port 34428 ssh2
Sep 26 16:20:29 server sshd[20264]: Failed password for invalid user transfer from 138.97.241.37 port 54654 ssh2
2020-09-27 00:49:16
138.97.241.37 attackbots
21125/tcp 9563/tcp 15319/tcp...
[2020-08-31/09-26]19pkt,18pt.(tcp)
2020-09-26 16:40:09
138.97.23.190 attack
Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):
2020-09-25 05:18:57
138.97.241.37 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-09-13 21:56:34
138.97.241.37 attackspam
Sep 13 07:25:21 abendstille sshd\[21590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:25:23 abendstille sshd\[21590\]: Failed password for root from 138.97.241.37 port 33160 ssh2
Sep 13 07:29:54 abendstille sshd\[25756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep 13 07:29:56 abendstille sshd\[25756\]: Failed password for root from 138.97.241.37 port 41632 ssh2
Sep 13 07:34:29 abendstille sshd\[30104\]: Invalid user it from 138.97.241.37
Sep 13 07:34:29 abendstille sshd\[30104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
...
2020-09-13 13:51:43
138.97.241.37 attackbots
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-13 05:35:24
138.97.212.245 attackbots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-11 03:23:00
138.97.212.245 attackspambots
IP 138.97.212.245 attacked honeypot on port: 1433 at 9/9/2020 9:46:48 AM
2020-09-10 18:52:45
138.97.241.37 attackbotsspam
Sep  8 02:23:41 web9 sshd\[17871\]: Invalid user raudel from 138.97.241.37
Sep  8 02:23:41 web9 sshd\[17871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37
Sep  8 02:23:42 web9 sshd\[17871\]: Failed password for invalid user raudel from 138.97.241.37 port 34302 ssh2
Sep  8 02:27:31 web9 sshd\[18342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 02:27:33 web9 sshd\[18342\]: Failed password for root from 138.97.241.37 port 60396 ssh2
2020-09-08 21:19:02
138.97.241.37 attackspam
Sep  8 04:42:19 ns382633 sshd\[23233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:42:21 ns382633 sshd\[23233\]: Failed password for root from 138.97.241.37 port 47262 ssh2
Sep  8 04:47:18 ns382633 sshd\[24132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
Sep  8 04:47:20 ns382633 sshd\[24132\]: Failed password for root from 138.97.241.37 port 58364 ssh2
Sep  8 04:51:08 ns382633 sshd\[24920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.241.37  user=root
2020-09-08 13:11:24
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.2.233
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43170
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.97.2.233.			IN	A

;; AUTHORITY SECTION:
.			596	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:58:16 CST 2022
;; MSG SIZE  rcvd: 105
Host info
233.2.97.138.in-addr.arpa domain name pointer 233-2-97-138.clickturbo.com.br.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
233.2.97.138.in-addr.arpa	name = 233-2-97-138.clickturbo.com.br.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
112.85.42.187 attack
Oct  2 10:20:47 ns381471 sshd[22867]: Failed password for root from 112.85.42.187 port 22759 ssh2
2020-10-02 16:37:01
118.25.150.183 attackbots
Oct  2 10:02:04 con01 sshd[396077]: Invalid user mario from 118.25.150.183 port 43870
Oct  2 10:02:04 con01 sshd[396077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.150.183 
Oct  2 10:02:04 con01 sshd[396077]: Invalid user mario from 118.25.150.183 port 43870
Oct  2 10:02:06 con01 sshd[396077]: Failed password for invalid user mario from 118.25.150.183 port 43870 ssh2
Oct  2 10:06:11 con01 sshd[402964]: Invalid user sarah from 118.25.150.183 port 34424
...
2020-10-02 16:52:06
178.128.54.182 attack
20 attempts against mh-ssh on cloud
2020-10-02 16:36:05
165.227.46.89 attack
Oct  2 10:14:21 haigwepa sshd[27725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.46.89 
Oct  2 10:14:23 haigwepa sshd[27725]: Failed password for invalid user juancarlos from 165.227.46.89 port 43928 ssh2
...
2020-10-02 16:27:27
58.33.84.251 attackbotsspam
Invalid user samba1 from 58.33.84.251 port 61653
2020-10-02 16:51:09
103.75.149.106 attackbots
detected by Fail2Ban
2020-10-02 16:37:28
200.29.105.12 attackspambots
Oct  2 08:23:19 game-panel sshd[28268]: Failed password for root from 200.29.105.12 port 53181 ssh2
Oct  2 08:27:37 game-panel sshd[28458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.105.12
Oct  2 08:27:39 game-panel sshd[28458]: Failed password for invalid user lh from 200.29.105.12 port 57654 ssh2
2020-10-02 16:31:43
170.83.198.240 attackbots
Lines containing failures of 170.83.198.240 (max 1000)
Oct  1 22:33:44 HOSTNAME sshd[22226]: Did not receive identification string from 170.83.198.240 port 18375
Oct  1 22:33:48 HOSTNAME sshd[22230]: Address 170.83.198.240 maps to 170-83-198-240.starnetbandalarga.com.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct  1 22:33:48 HOSTNAME sshd[22230]: Invalid user avanthi from 170.83.198.240 port 18421
Oct  1 22:33:48 HOSTNAME sshd[22230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.83.198.240
Oct  1 22:33:50 HOSTNAME sshd[22230]: Failed password for invalid user avanthi from 170.83.198.240 port 18421 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=170.83.198.240
2020-10-02 16:31:16
125.119.43.254 attackbotsspam
Oct  1 20:33:58 CT3029 sshd[7727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.119.43.254  user=r.r
Oct  1 20:34:00 CT3029 sshd[7727]: Failed password for r.r from 125.119.43.254 port 60634 ssh2
Oct  1 20:34:01 CT3029 sshd[7727]: Received disconnect from 125.119.43.254 port 60634:11: Bye Bye [preauth]
Oct  1 20:34:01 CT3029 sshd[7727]: Disconnected from 125.119.43.254 port 60634 [preauth]
Oct  1 20:34:26 CT3029 sshd[7729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.119.43.254  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=125.119.43.254
2020-10-02 16:36:46
49.235.16.103 attackspambots
Invalid user cloud from 49.235.16.103 port 49830
2020-10-02 16:45:31
213.113.9.166 attackbots
Oct  2 10:04:56 vps639187 sshd\[4273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.113.9.166  user=root
Oct  2 10:04:58 vps639187 sshd\[4277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.113.9.166  user=root
Oct  2 10:04:59 vps639187 sshd\[4273\]: Failed password for root from 213.113.9.166 port 52714 ssh2
...
2020-10-02 16:44:35
14.63.125.204 attackspam
Found on   Alienvault    / proto=6  .  srcport=30883  .  dstport=5555  .     (3848)
2020-10-02 16:39:54
49.233.185.157 attack
Connection to SSH Honeypot - Detected by HoneypotDB
2020-10-02 16:29:06
162.243.128.133 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-10-02 16:42:17
89.163.148.157 attackbotsspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-10-02 16:38:18

Recently Reported IPs

118.190.34.249 138.97.2.238 138.97.2.243 138.97.2.246
138.97.2.236 138.97.2.244 138.97.2.241 138.97.2.234
118.190.37.211 138.97.2.249 138.97.2.252 138.97.2.31
138.97.2.26 138.97.2.254 138.97.2.42 138.97.2.38
138.97.2.40 138.97.2.4 138.97.2.37 138.97.2.34